Reply to thread

Message

<blockquote data-quote="bazang" data-source="post: 1119846" data-attributes="member: 114717">Result is predictable.No anitivirus are robustly effective against malicious scripts unless they block scripts by default. Furthermore, all antivirus have poor protections against exploits. In fact, many security software that claim they provide &quot;anti-exploit protection&quot; do not. What they are actually doing is providing post-exploit protections; the security software does not detect or block the exploit itself, but instead after the exploit they are blocking command lines or other blocks based upon file reputation. That is not anti-exploit.All AV work until they don&#039;t. And they very often don&#039;t. As has been shown here on this forum many times it is trivial for pentesters to come up with ways to bypass them all.Too many people focus on the security software. What&#039;s worse, they want default allow. All those people are set for failure at the moment of truth.</blockquote>

[QUOTE="bazang, post: 1119846, member: 114717"] Result is predictable. No anitivirus are robustly effective against malicious scripts unless they block scripts by default. Furthermore, all antivirus have poor protections against exploits. In fact, many security software that claim they provide "anti-exploit protection" do not. What they are actually doing is providing post-exploit protections; the security software does not detect or block the exploit itself, but instead after the exploit they are blocking command lines or other blocks based upon file reputation. That is not anti-exploit. All AV work until they don't. And they very often don't. As has been shown here on this forum many times it is trivial for pentesters to come up with ways to bypass them all. Too many people focus on the security software. What's worse, they want default allow. All those people are set for failure at the moment of truth. [/QUOTE]

Verification